CVE-2015-1881

OpenStack Glance Denial of service by creating a large number of images

4.0 MediumFix available

OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them, a different vulnerability than CVE-2014-9684.

Exploit likelihood

2.12%Up 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 4.0

Record: CVE-2015-1881
CVSS 2.0: 4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-1881
Updated: 2026-11-02

EUVDEUVD-2015-0035 No score

Record: EUVD-2015-0035
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4jp4-3c62-r8jv 8.7

OpenStack Glance Denial of service by creating a large number of images

Record: GHSA-4jp4-3c62-r8jv
CVSS 4.0: 8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-770
Updated: 2026-11-02

OSVGHSA-4jp4-3c62-r8jv 8.7

OpenStack Glance Denial of service by creating a large number of images

Record: GHSA-4jp4-3c62-r8jv
CVSS 4.0: 8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-770
Updated: 2026-11-02

OSVPYSEC-2015-38 No score

Record: PYSEC-2015-38
Updated: 2026-11-02

Affected products

openstack image registry and delivery service \(glance\)

Affected packages

Affected packages
Package	Affected	Fixed
`glance` PyPI	before 11.0.0a0	11.0.0a0
`openstack-glance` Red Hat:openstack:6::el7 From an advisory covering 2 CVEs	before 0:2014.2.3-1.el7ost	0:2014.2.3-1.el7ost
`openstack-glance-doc` Red Hat:openstack:6::el7 From an advisory covering 2 CVEs	before 0:2014.2.3-1.el7ost	0:2014.2.3-1.el7ost
`python-glance` Red Hat:openstack:6::el7 From an advisory covering 2 CVEs	before 0:2014.2.3-1.el7ost	0:2014.2.3-1.el7ost
`python-glance-store` Red Hat:openstack:6::el7 From an advisory covering 2 CVEs	before 0:0.1.10-3.el7ost	0:0.1.10-3.el7ost

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1881 is a medium vulnerability (CVSS 4.0) in Openstack Image Registry And Delivery Service \(glance\), published February 24, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.12%, the 81st percentile. Fixed in glance 11.0.0a0.

References

Show 15 moreShow less